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This  thesis  is  the  result  of  research  done  to  determine 
if  the  Avionics  Evaluation  Program  (AEP) , a Monte  Carlo 
simulation  model,  could  be  used  to  assess  alternate  avionic 
systems  for  the  KC-135  aircraft.  The  impact  of  Improved 
navigation  reliability  and  accuracy  on  the  KC-135  mission 
success  rate  was  the  primary  area  of  investigation  during 
the  research,  Alternate  avionic  suites  were  input  into  the 
AEP  model  and  the  results  were  compared  with  the  results  of 
the  baseline  simulation.  To  aid  the  reader,  a glossary  of 
acronyms  used  in  this  thesis  can  be  found  in  Appendix  A. 

I hope  that  this  research  will  be  helpful  to  the  people 
who  are  currently  involved  in  the  KC-135  Avionics  Moderniza- 
tion Program  and  that  it  has  been  of  some  help  in  improving 
the  AEP  model. 

I would  like  to  thank  my  sponsor,  Ms.  Diane  Summers, 
Technical  Manager  of  the  Systems  Evaluation  Group  (AFAL/AAA-3) , 
who  got  me  interested  in  this  thesis  topic,  and  my  advisor, 
Major  Kenneth  Melendez,  who  gave  me  continued  motivation  and 
advice  during  my  research.  Special  thanks  are  also  due  to 
Captain  Kenneth  Almquist  of  AAA- 3 for  his  thorough  knowledge 
of  the  AEP  and  his  help  in  applying  the  AEP  to  my  thesis 
problem. 

The  views  and  conclusions  in  this  thesis  are  solely  my 
own  and  I assume  full  responsibility  for  any  errors  or  omis- 
sions . 

Joel  R.  Jerabek 
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ABSTRACT 

The  KC/C-135  Avionics  Modernization  Program  is  currently 
tasked  with  determining  the  feasibility  of  replacing  the 
KC/C-135  navigator  with  cost-effective  avionics  systems. 

The  Avionics  Evaluation  Program  (AEP)  is  a computer  model 
that  has  been  built  to  evaluate  the  mission  impact  caused 
by  alternate  avionics  hardware  configurations.  Although 
the  AEP  was  designed  to  model  tactical  aircraft  missions, 
this  thesis  examines  whether  it  could  be  applied  to  the 
strategic  mission  of  the  KC-135. 

Aircraft  performance  data,  hardware  reliability  data, 
and  abort  logic  criteria  were  input  into  the  model.  A 
baseline  simulation  was  conducted  using  the  current  KC-135 
configuration.  Two  additional  configurations,  single 
inertial  navigation  system  (INS)  with  a navigator  and  dual 
INS  without  a navigator,  were  selected  and  simulations  con- 
ducted. These  simulations  were  conducted  with  both  peacetime 
and  wartime  mission  scenarios. 

An  analysis  of  the  AEP  output  data  revealed  that  the 
addition  of  a single  INS  produced  a significant  improvement 
in  navigational  accuracy  and  that  by  replacing  the  navigator 
with  a second  INS,  navigational  accuracy  could  be  maintained 
without  a change  in  the  mission  success  rate.  The  baseline 
established  by  this  thesis  is  available  for  future  use  in 
evaluating  other  avionics  configurations  for  the  KC-135. 


vii 


4 


«i-a 


■■A 


4 


■1 


A METHOD  FOR  EVALUATING 
KC-13S  AVIONICS  CONFIGURATIONS 

I . Introduction 

The  Air  Force  is  currently  in  the  process  of  improving 
the  performance  and  extending  the  life  of  the  KC/C-135 
fleet.  An  area  of  particular  interest  at  this  time  is  the 
modernization  of  KC/C-135  avionics  equipment. 

The  overall  objective  of  the  KC/C-135  Avionics  Moderni- 
zation Program  is  to  determine  whether  it  is  feasible  for  a 
two -crewmember  (pilot  and  copilot)  flight-deck  to  complete 
all  KC/C-13S  mission  requirements  with  no  compromise  to 
either  mission  performance  or  aircraft  operational  safety 
by  replacing  the  navigator  with  cost  effective  avionics 
systems.  The  KC/C-135  Avionics  Modernization  Program  will 
concentrate  on  the  avionics  equipment  necessary  to: 

(1)  reduce  crew  size,  (2)  reduce  operating  and  maintenance 
costs,  and  (3)  improve  navigation  systems  (Ref  1:1.1), 

Background 

The  required  operational  capability  (ROC)  that  was 
stated  in  SAC  ROC  5-74,  dated  22  March  1974,  and  validated 
by  Hq  USAF,  directed  a KC/C-135  navigation  system  moderni- 
zation effort  to  allow  KC/C-135  operation  in  the  trans- 
oceanic track  system  within  the  navigational  tolerances 
established  by  the  International  Civil  Aeronautical  Organi- 
zation and  the  Federal  Aviation  Administration.  It  was 
concluded  that  a single  inertial  navigation  system  (INS)  and 
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a new  doppler  system  were  needed  to  meet  this  requirement. 

A common  strategic  doppler  system  (common  to  the  KC/C-135 
and  the  B-S2)  has  been  developed  and  the  Delco  Carousel-IV 
INS  has  been  selected  to  fulfill  this  requirement.  An 
amendment  to  the  ROC,  dated  25  February  1977,  stated  a 
requirement  for  dual  INS's  in  order  to  eliminate  the  navi- 
gator crewmember  position  (Ref  1:1. 2. 2).  This  amendment 
has  initiated  the  KC/C-135  Avionics  Modernization  Program. 

The  KC/C-135  Avionics  Modernization  Program  was  pre- 
ceded by  two  KC-135  crow  reduction  tests,  Giant  Change  and 
Giant  Boom,  that  were  conducted  by  the  Strategic  Air 
Command.  Both  of  these  flight  tests  involved  the  installa- 
tion of  two  Carousel-IV  XNS‘s  in  a KC-135  to  eliminate  the 
navigator's  duties.  Giant  Change  identified  some  phases 
of  two  crewmember  tanker  operations  that  required  in  excess 
of  100%  crew  effort  to  accomplish  the  required  tasks  within 
acceptable  safety  standard.  Giant  Boom  concluded  that  the 
addition  of  a Flight  Systems  Operator  reducod  crewmember 
overload  conditions  during  emergencies  and  critical  phases 
of  flight,  and  at  no  time  did  pilot/copilot  overload 
conditions  constitute  a discernable  safety  problem  (Ref  1:1. 2.1). 

The  KC/C-135  Avionics  Modernization  Program  is  currently 
in  the  system  definition  phase.  This  phase  combines  mission 
analysis,  system  definition,  and  crew  station  evaluation 
studies  to  determine  the  crew  system  control  and  display 
requirements  for  a two-crewmember  flight  deck.  The  product 
of  this  phase  will  be  the  initial  definition  of  criteria  for 


crew  systems  and  a detailed  description  of  the  crew  tasks 
that  must  be  performed  to  complete  a mission.  Phases  I 
and  II  will  follow  the  system  definition  phase  and  they 
will  consist  of  system  validation  through  flight  simulation 
and  flight  test,  respectively. 

Problem  Statement 

During  the  KC/C-135  Avionics  Modernization  Program, 
many  different  avionics  configurations  will  be  proposed. 
Each  of  these  configurations  needs  to  be  objectively  as- 
sessed for  mission  effectiveness  on  the  KC/C-135  aircraft 
before  an  effective  choice  can  be  made. 

Objectives  of  the  Study 


The  primary  objective  of  this  effort  is  to  determine  if 
the  Avionics  Evaluation  Program  computer  model  can  be  used 
as  a quantitative  method  to  comparatively  evaluate  various 
KC/C-135  avionics  configurations  in  terms  of  their  potential 
reliability  and  effectiveness  in  a realistic  mission  environ- 
ment. If  the  AEP  can  be  used  in  this  manner,  this  thesis 
will  provide  a baseline  for  future  use  during  the  KC/C-135 
Avionics  Modernization  Program. 

A secondary  objective  is  to  produce  a list  of  expected 
equipment  failures  that  can  be  used  during  the  flight  simu- 
lation phase  to  construct  realistic  mission  scenarios  that 
would  include  typical  system  failures. 

Assumption 

This  thesis  is  based  on  the  assumption  that  the  KC-135 
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can  safely  complete  its  tanker  mission  by  replacing  the 
navigator  with  cost  effective  avionics  systems. 


The  Avionics  Evaluation  Program  (see  Methodology)  can 
be  used  to  objectively  assess  alternate  avionic  system  de- 
sign/concepts for  the  KC-135  aircraft,  in  terms  of  mission 
effectiveness,  in  a realistic  mission  environment. 

Scope 

This  study  will  deal  only  with  system  reliability  and 
will  consider  neither  system  costs  nor  maintainability.  The 
study  will  consider  only  the  mission  and  equipment  of  the 
KC/135A  aircraft,  since  they  represent  the  majority  of 
aircraft  in  the  KC/C-135  fleet. 

This  paper  will  first  describe  what  the  Avionics 
Evaluation  Program  is  and  how  it  was  used  for  this  study. 
Next,  an  evaluation  of  the  model  will  be  made  through  veri- 
fication, validation,  and  analysis  of  the  output  data. 
Finally,  a summary,  with  conclusions  and  recommendations 
will  be  given. 


II,  Methodology 
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The  primary  tool  used  in  this  study  will  be  the  Avionics 
Evaluation  Program  Air-to-Ground  Mission  Analysis  Model,  here' 
after  referred  to  as  the  AEP.  This  model  was  developed  by 
the  Battelle  Columbus  Laboratories  for  the  Air  Force  Avionics 
Laboratory  (AFAL)  and  is  documented  in  AFAL-TR-76-196, 

The  AEP  is  a Monte  Carlo  simulation  of  a flight  of 
aircraft  (up  to  four)  through  a specified  number  of  days  of 
operation,  Functions  considered  in  this  model  include  ground 
maintenance,  communication,  navigation,  refueling,  target 
acquisition,  and  weapon  delivery.  The  program  operates  as 
follows: 

(1)  The  user  provides  data  which:  (a)  defines  the  flight 
profile,  (b)  lists  the  hardware  makeup  (all  aircraft 
identically  equipped,  and  the  associated  aircraft 
performance) , and  (c)  defines  the  functions  to  be  used 
for  the  simulation. 
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(2)  The  program  makes  a deterministic  evaluation  of  the 
mission.  As  part  of  the  evaluation,  the  aircraft 
equations  of  motion  are  integrated  to  determine  the 
nominal  time  history  of  the  flight.  The  aircraft 
states  are  stored  as  a function  of  time  for  use  during 
the  Monte  Carlo  evaluation,  This  part  of  the  program 
is  also  referred  to  as  the  nominal  portion  of  the  simu- 
lation. 
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(3)  A Monte  Carlo  simulation  is  conducted.  A single  Monte 
Carlo  trial  is  represented  by  simulating  the  scheduled 
flight  operations  for  a specific  number  of  days.  The 
events  that  occur  during  a mission  depend  on  random 
draws  from  probability  distributions  described  by 
function  performance  data  and  hardware  reliability. 
Numerous  trials  are  simulated  to  estimates  (a)  mission 
success , (b)  mission  aborts,  and  (c)  aircraft  losses 
(Ref  2:3). 

The  AEP  provides  a means  for  assessing  the  mission  im- 
pact caused  by  different  avionic  hardware  configurations  and 
allows  the  user  to  obtain  a quantitative  view  of  the  import- 
ance and  interaction  of  the  hardware  (Characteristics  (Ref  2:5). 

Flight  Profile 

In  order  to  begin  this  study,  a typical  KC-135  mission 
had  to  be  selected.  The  Air  Force  Flight  Dynamics  Laboratory, 
with  the  help  of  Strategic  Air  Command,  has  developed  three 
"representative"  tanker  mission  scenarios  for  use  in  their 
Tanker  Avionics/Aircrew  Complement  Evaluation  (TAACE) . The 
first  TAACE  mission  scenario  consists  of  a two  ship  cell  of 
KC-135 ' s that  takeoff  from  Loring  AFB,  Maine,  rendezvous 
with  a flight  of  fighter  aircraft  and  escorts  and  refuels 
them  on  their  deployment  to  the  United  Kingdom,  and  landing 
at  RAF  Mildenhall,  United  Kingdom  (Figure  1).  This  scenario 
was  chosen  to  represent  the  peacetime  tanker  mission  for  the 
AEP  simulation  because  mission  success  depends  heavily  upon 
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Figure  1.  Loring  Tanker  Task  Force  Mission  Profile  (Source:  AFFDL/FGR) 


the  accuracy  and  reliability  of  the  aircraft's  navigation 
equipment.  The  second  and  third  TAACE  mission  scenarios 
represent  tanker  missions  under  Emergency  War  Orders  (BWO) 
or  wartime  conditions.  These  scenarios  involve  the  refuel- 
ing of  B-S2  and  FB-111  aircraft,  respectively.  Because  of 
their  similarity,  only  mission  scenario  two  was  chosen  to 
represent  a wartime  mission  profile  for  the  AEP  simulation. 
In  TAACE  mission  scenario  two,  a two  ship  cell  of  KC-135's 
takeoff  from  RAF  Mildenhall  and  proceed  directly  to  an  over- 
water, high-latitude  rendezvous  with  two  B-52's.  Because 
of  weather  along  the  original  refueling  track,  a diversion 
to  a new  refueling  track  is  made  and  a rendezvous  with  the 
B-52's  is  completed.  The  tankers  leave  the  receivers  and 
make  an  emergency  recovery  at  Bodo  RNAFB , Norway  (Figure  2) . 
The  various  equipment  failures  and  degraded  operating  modes 
depicted  in  these  scenarios  are  output  products  of  the  AEP 
and  were  not  input  into  the  AEP  simulation. 

Once  these  scenarios  had  been  chosen,  they  had  to  be 
put  into  the  mission  profile  format  used  by  the  AEP.  To 
simplify  the  mission  profiles,  all  missions  fly  a straight 
track  from  takeoff  to  landing.  This  assumption  should  not 
affect  the  results  of  the  simulation  because  most  of  a 
normal  tanker  mission  consists  of  "straight  and  level" 
flying  and  the  actual  turns  made  during  a real  mission 
would  be  well  within  the  aircrafts  performance  capabilities. 
The  AEP  flight  profile  is  defined  by  a set.  of  waypoints  that 
describe  the  flight  path.  Waypoints  need  only  be  specified 
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Mildenhall  EWO  Mission  Profile  (Source:  AFFDL/FGR) 
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where  some  change  in  heading,  velocity,  or  altitude  occur. 
Each  waypoint  of  the  flight  profile  is  defined  by: 

1.  ID  - Identification  number 

2.  X - X distance  from  origin  (NM) 

3.  Y - Y distance  from  origin  (NM) 

4.  H - Altitude  above  mean  sea  level  (feet) 

t i 

5.  V - Velocity  in  knots 

6.  B - Maximum  bank  angle  allowed  at  this  waypoint 

In  addition  to  the  above  data,  the  waypoints  are  used 
to  specify  the  on  and  off  times  for  the  flight  functions 
(see  Functions).  The  user  can  turn  on  or  turn  off  up  to 
five  functions  at  a single  waypoint.  Mode  regression 
within  a function  to  a less  desired  operating  mode  will  not 
occur  unless  that  function  is  turned  on  even  though  an  equip- 
ment failure  associated  with  that  function  has  occurred.  The 
AEP  assumes  that  the  equipment  failure  rate  is  the  same 
whether  a function  is  on  or  off  since  most  aircraft  equip- 
ment is  left  on  for  the  entire  mission.  The  on-off 
capability  of  the  model  allows  the  simulated  mission  to 
continue  to  the  logical  point  the  abort  would  have  actually 
occurred,  thus  providing  realistic  exposure  to  additional 
equipment  failures  and  the  possible  aircraft  loss  due  to 
compound  failures. 

The  flight  profile  includes  the  locations  of  targets 
which  are  used  in  the  target-acquisition  function  to  simu- 
late radar  identifier  tion  of  receiver  aircraft  and  severe 
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weather.  Up  to  five  rargets  can  be  defined  by  specifying  i 

I 

their  position  with  their  X and  Y distances  (NM)  from  the  | 

origin.  The  flight  profile  data  used  in  the  ABP  simulation  i 

is  shown  in  Tables  I and  II.  ;| 

Aircraft  Equipment  | 

As  part  of  the  input  data,  the  user  must  list  the  air* 
craft  equipment.  Two  terms,  section  and  candidate,  are  i 

used  to  describe  hardware.  These  terns  are  defined  as 
follows:  (Ref  2:7). 

A section  is  a general  category  of  hardware  such  as 
navigation  or  communications.  In  general,  the  first  J 

two  digits  of  the  standard  Air  Force  Work  Unit  Code  j 

(WUC)  defines  a section. 

A candidate  is  a specific  hardware  item  within  a given  j 

section.  For  example,  a candidate  for  a communication  j 

system  might  be  an  ARC-34  (UHF  radio)  or  an  ARC-58  (HF  | 

radio) . | 

I 

I 

In  selecting  the  equipment  for  the  simulation,  the  -( 

user  must  determine  the  level  of  detail  desired  for  each  j 

aircraft  system.  The  critical  systems  considered  for  this  I 

study  are  listed  in  Appendix  B.  Non-avionic  systems,  such  | 

as  the  hydraulic  system,  are  considered  In  the  simulation  so  j 

that  improvements  in  mission  success  due  to  improved  avionics  j 

equipment  can  be  compared  to  the  overall  mission  success  rate.  j 

Most  non-avionic  systems  are  considered  to  be  one  piece  of  1 
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equipment  in  the  simulation)  thus,  these  sections  usually 
have  only  one  candidate,  Since  the  goal  of  this  study  is 
to  determine  the  impact  of  avionics  equipment  on  the  overall 
mission  success  rate,  avionics ‘related  sections  are  looked 
at  in  more  detail  so  that  different  candidates  within  a 
section  can  be  changed  to  determine  their  impact  on  the 
mission  success  rate. 

For  each  candidate  in  a section  considered,  the  standard 
equipment  data  items  shown  in  Table  III  must  be  established. 
Since  this  study  has  been  limited  to  system  reliability  and 
will  not  address  system  cost  or  maintainability,  only  the 
mean  time  between  failure  and  the  number  of  redundant  boxes 
for  each  candidate  needed  to  be  furnished. 

TABLE  III 

STANDARD  EQUIPMENT  DATA  ITEMS  (Ref  2:8) 


1. 

MTBF 

2. 

MTBMA 

3. 

OFR 

4, 

Pv 

S. 

nr 

6. 

MTTR 

7. 

PR 

8. 

Pa 

9. 

Pu 

10. 

Pf 

11. 

Ac 

12, 

UMC 

True  mean  time  between  failures  based  on 
flight  hours 

Mean  time  between  unscheduled  maintenance 
actions 

Operational  hours  per  flight  hour 

Vulnerability 

Number  of  redundant  boxes 

Mean  time  to  repair 

Probability  the  box  will  be  replaced 

Probability  replacement  box  is  available 

Probability  of  undetected  failure 

Probability  of  false  failure 

Acquisition  cost 

Cost  per  unscheduled  maintenance  action 
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The  reliability  data  (Appendix  B)  used  in  this  study 
was  taken  from  a source  titled  "Maintenance  Actions,  Manhours, 
and  Aborts  by  Work  Unit  Code".  This  data  is  provided  by  the 
Air  Force  Logistics  Command  for  almost  all  Air  Force  aircraft, 
missiles,  trainers  and  simulators,  and  ground  equipment.  This 
data  is  updated  monthly  and  lists  specific  data  for  the  pre- 
vious six  months.  Most  equipment  data  necessary  for  this 
simulation  was  available  from  this  data  source.  The  mean 
time  between  failure  (MTBF)  is  computed  for  each  work' unit 
code  unless  no  failures  have  been  reported  for  that  WUC  for 
any  three  consecutive  months  during  the  last  six  months. 

For  each  monthly  MTBF  computation,  a three -month  accumula- 
tion of  failures  and  operating  time  (flying  time)  is  used. 

The  following  formula  is  employed: 

inmn  _ Operating  tints  X Use  factor  X QPA 
mB?  ■ TJumSer  of'  FaUurVr  *— 

where : 

Use  factor  • ratio  of  unit  operating  time  to  flying 
time  (normally  1,0). 

QPA  ■ number  of  identical  items  reportable 

under  one  work  unit  code. 

The  KC-135A  Aircraft  Flight  Manual  (Ref: 3)  and  the 
author's  experience,  with  over  1000  hours  of  flying  time 
as  a KC-135  pilot,  were  used  to  determine  which  aircraft 
sections  and  candidates  would  be  considered  as  mission 
essential  for  this  simulation.  In  general,  the  minimum 
equipment  required  for  a normal  peacetime  takeoff  was 


IS 


used  for  the  peacetime  simulation.  During  the  EWO  simula- 
tion, the  equipment  required  for  takeoff  is  reduced  to  the 
minimum  required  to  get  the  aircraft  airborne.  Most 
ncn-avionic  sections  were  viewed  as  a single  piece  of 
equipment  and  the  MTBF  represented  the  combined  failure 
rate  for  all  hardware  within  that  section.  The  avionics 
sections  (instruments,  communications,  and  navigation)  were 
looked  at  in  greater  detail  so  that  the  impact  of  those 
candidates  on  mission  success  could  be  evaluated.  The  sec- 
tions and  candidates  selected  for  use  in  the  simulation  are 
shown  in  Table  IV. 

Aircraft  Performance 

Y 

The  deterministic  evaluation  of  the  mission  requires 

that  the  performance  of  the  aircraft  be  specified.  To 

accomplish  this,  four  additional  standard  equipment  data 

items  are  required  to  define  the  airframe  candidates. 

These  data  items  are  as  follows: 

13.  Weight  of  Airframe  (lbs)  105,000 

14.  External  Fuel  (lbs) 0 

15.  Internal  Fuel  (lbs)  156,000/185,000 

16.  Aircraft  Type  (1-10)  9 

The  first  three  items  are  used  to  vary  the  gross  weight 
of  the  aircraft  for  the  simulation.  To  simulate  different 
aircraft  performance,  the  internal  fuel  was  varied  from 
156,000  lbs  to  185,000  lbs  to  represent  the  takeoff  fuel 
loads  for  peacetime  and  EWO  missions,  respectively.  Item  16, 
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KC-135A  Equipment  List 
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Aircraft  Type,  is  used  to  retrieve  data  stored  as  a perman- 
ent file  in  the  FASTAC  Air-to-Air  model.  Since  the  KC-13S 
had  not  previously  been  used  in  this  air-to-air  model,  its 
performance  data  had  to  be  obtained  and  stored.  The  per- 
formance data  and  the  format  required  by  the  FASTAC  model 
are  shown  in  Table  V.  This  data  is  used  during  the 
deterministic  evaluation  to  determine  the  nominal  time 
history  of  the  flight  and  can  be  found  in  Appendix  C. 

Functions,  Subfunctions.  Modes,  and  States 

The  concept  of  functions,  subfunctions,  modes,  and 
states  used  in  the  AEP  is  fundamental  to  the  understanding 
of  the  model.  Functions  are  the  operations  or  actions  per- 
formed during  the  simulation.  Subfunctions  represent 
alternate  options  for  performing  a particular  function. 

Table  VI  lists  the  functions  and  subfunctions,  along  with 
their  associated  data,  that  were  used  for  this  simulation. 
Only  those  functions  and  subfunctions  that  have  data 
requirements  or  were  used  in  the  simulation  are  chosen. 

Several  operating  modes  (primary  and  backup  modes)  are 
possible  for  each  subfunction,  and  for  this  reason,  some  of 
the  subfunctions  listed  o;i  Table  VI  show  multiple  data.  This 
represents  data  for  different  modes,  with  mode  1 being  on 
the  left.  The  concept  of  modes  is  simple  for  a one  aircraft 
simulation.  In  that  case,  there  is  a single  suite  of  hard- 
ware and  performance  data  associated  with  each  mode  that  is 
defined  for  a subfunction.  The  user  sets  up  the  problem 
such  that  the  first  mode  represents  the  best  performance 


TABLE  V.  FASTAC  INPUT  DATA  FOR 
DEFINING  NEW  AIRCRAFT 


Variable 

Units 

Format 

Name 

8A10 

Wfcight 

lb 

Reference  Area 

sq.  ft. 

L 4F10.0 

Dreg  Brake  Coefficient 

Normal  Acceleration 

a'* 

J 

- * - Maximum  Lif 

* 

t Coefficient 

Versus  Mach-  - - 

Mach  Numbers 

13F6.0 

Maximum  Lift  Coefficients 

13F6.0 

- - - Drag  Coefficient 

Versus  Lift 

Coefficient  and  Mach  - - - 

Mach  Numbers 

13F4.0 

Lift  Coefficients 

11F4.0 

Drag  Coefficients 

Up  to  13  cards,  11F4.0, 

scaled  by  0.0001 

- - - Engine  Data 

Versus  Altitude  and  Mach  - - - 

Mach  Numbers 

Altitudes 

ft 

Afterburner  Thrush 

lb 

Up  to  13  cards,  6F9.0 

Afterburner  Fuel  Flow 

lb/hr 

Up  to  13  cards,  6F9.0 

Military  Thrust 

lb 

Up  to  13  cards,  6F9.0 

Military  Fuel  Flow 

lb/hr 

Up  to  13  cards,  6F9.0 

- - - Maximum  Velocity  Versus  Altitude  - - - 


Altitudes 

ft 

11FS.0 

Maximum  Mach  Numbers 

11FS.0 

- - - Angle  of  Attack  Versus  Lift 

Coefficient 

and  Mach 

- - - 

Mach  Numbers 

13F6.0 

Lift  Coefficients 

11F6.0 

Angle  of  Attack 

deg 

Up  to  13  cards,  11F6.0 
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TABLE  VI 

FUNCTION/SUBFUNCTION  DATA  REQUIREMENTS 


Function  Subfunction  Name  (number)  Data 


FUEL  Fuel  Loading  (3.1) 

a,  Fueling  rate  (lb/rain) 5000 

Fuel  Usage  (3,2) 

a,  Minimum  fuel  level  (lb) 18,000/0 

Refueling  (3.3) 

a.  Minimum  Hook-up  time  (min) 10/20 

b.  Maximum  hook-up  time  (min) 10/20 

c.  Refueling  rate  (lb/min).  . . . -1000/-6000 

d.  Number  of  aircraft  refueled 

simultaneously  . 1 


FLIGHT  Launch  (4.1) 

a.  Mean  wait  time  (min) 30 

b.  Standard  deviation  (min)  5 


Inflight  Aircraft  Abort  (4.2) 
Mission  Abort  (4.3) 

Aircraft  Loss  (4.4) 

Landing  (4.5) 


MISSION  Schedule  (5.1) 

a.  Earliest  time  to  begin 

preflight  (hr) 0900 

b.  Earliest  time  to  begin 

launch  (hr)  1100 

c.  Minimum  time  until  next 

sortie  (hr) 24 

d.  Latest  time  to  launch 

sortie  (hr) 1200 

e.  Maximum  delay  before  cancel 

(hr) 1 

f.  Number  of  days  to  simulate 1 


FORMATION  Nominal  Flight  (6.1) 

a.  A/c  2 relative  to  a/c  1 

(ft) -behind S000 

b.  A/c  2 relative  to  a/c  1 

(ft) -right 3000 

c.  A/c  2 relative  to  a/c  1 

(ft) -above 500 


TABLE  VI  (Continued) 
FUNCTION/SUBFUNCTION  DATA  REQUIREMENTS 


Function 

Subfunction  Name  (number) 

Data 

NAVIGATION 

Radio  Aided  Navigation  (7.1) 

a.  Fixed  position  error  (nm)  , . . 

b.  Correlation  time  constant 

(min)  .....  

. 3. 2/5.0 

0 

Self-Contained  Navigation  (7,2) 

a.  Per  unit  time  error  growth 

rate  (nm/hr).  . . . .96/4.9/5.6/9.3/13.6 

b.  Correlation  time 

constant  (min)  . 1,0/10.0 

COMMUNI- 

CATIONS 

Interflight  (9,1) 

External  (9.2) 

TARGET  AC- 
QUISITIONS 

Display  Acquisition  (11,1) 

a,  Horizontal  Width  of  Sensor 

Field  of  View  ......... 

b.  Side  Look  Angle  for  Each 
Aircraft  ........... 

c.  Table  of  Depression  Angles 

d,  Cumulative  Probability  of 
Detection  vs.  Depression  Angle 

. . 179.9 

. . 0 

Visual  Acquisition  (11.2) 

a.  Horizontal  Width  of  Sensor 

Field  of  View  

b.  Side  Look  Angle  for  Each 

Aircraft  

c.  Table  of  Depression  Angles 

d.  Cumulative  Probability  of 
Detection  vs.  Depression  Angle 

. . 179.9 

. . -45/45 
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and  subsequent  modes  represent  degraded  performance.  The 
introduction  of  multiple  aircraft  into  the  simulation  com- 
plicates the  problem  as  the  modes  must  then  apply  to  the 
entire  flight  of  aircraft.  The  user  defines  mode  regres- 
sion criteria  for  the  flight  using  subfunction  states.  A 
subfunction  state  defines  the  equipment  status  for  each 
aircraft  for  that  particular  subfunction.  Associated  with 
each  state  is  a suite  of  hardware  selected  from  the  list 
of  candidates.  State  1 represents  the  primary  equipment 
state  and  subsequent  states  represent  progressively 
degraded  hardware  states.  Based  on  the  definition  of  these 
states,  Boolean  AND/OR  logic  is  used  to  define  the  criteria 
for  each  mode  (Ref:  2:8-15).  A diagram  of  the  Function/ 
Subfunctlon/Mode/State  hierarchy  is  shown  in  Figure  3.  To 
illustrate  how  this  hierarchy  is  used  in  the  simulation, 
these  relationships  for  the  communications  function  would 
be: 


9. 


Communications  (function  9 of  ABP) 

9,1  Interflight  (subfunction  1 of  function  9) 
State  Equipment 


(candidates  required 


1 

63-1  63-2 

(UHF  radio  No.  1 6 2 

2 

63-1 

3 

63-2 

Modes 

Description 

Required  States 

1 

Both  Dual  UHF 

Al+Bl 

2 

One  Single 

AH-B2/A1+B3 

UHF 

A2+B1/A3+B1 

3 

Both  Single 

A2+B2/A2+B3 

UHF 

A3+B2/A3+B3 
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Figure  3,  Function/Subfunction/Mode/State  Hierarchy 
(Ref  2:15) 


9.2  External  (HF  for  overwater  mission) 

Eauipment 


62-1  (HF  radio) 


Reauired  State 


For  interflight  communications!  aircraft  A and  B take- 
off in  mode  1.  If,  for  example,  A loses  63-1  (Ho.  1 UHF 
radio  fails) , the  state  requirements  for  mode  1 can  no 
longer  be  met  and  mode  regression  to  mode  2 for  interflight 
communications  would  occur,  This  would  happen  since  A is 
now  in  state  3 and  B remained  in  state  1 (A3+B1) . If  B 
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were  to  lose  63-2  (UHF  No.  2),  regression  to  mode  3 would 
occur  since  A remained  in  state  3 and  B is  now  in  state  2 
(A3+B2) . If  either  A or  B loses  its  remaining  UHF  radio, 
that  aircraft  would  abort  the  next  time  subfunction  9,1  is 
turned  on  because  there  are  no  modes  left  to  regress  to. 
Similarly,  for  external  communications,  both  aircraft  are 
required  to  be  in  mode  1 for  takeoff.  If  either  aircraft 
A or  B loses  its  62-1  (HF  radio),  mode  1 is  still  retained 
since  Al/Bl  is  an  OR  statement.  If  both  aircraft  lose 
their  HF  radios,  then  both  aircraft  would  abort  the  mission 
(the  next  time  subfunction  9.2  is  turned  on).  It  must  be 
noted  that  if  a subfunction  is  not  turned  on  after  an 
equipment  failure,  mode  regression  will  not  occur  and, 
thus,  an  abort  will  not  occur.  The  mode/state  relationships 
for  all  subfunction  used  in  this  study  can  be  found  in 
Appendix  D. 

Functions  to  be  Used 

Some  functions  in  the  model  are  turned  on/off  by  user 
input  to  the  flight  profile  while  others  are  controlled 
internally  by  the  program,  A list  showing  function  control 
is  shown  in  Table  VII.  Since  scheduled  maintenance,  ord- 
nance, weapon  delivery  functions,  and  weapons  are  internally 
controlled  and  will  not  be  used  for  this  simulation,  it  was 
necessary  to  ensure  that  all  data  related  to  these  functions 
was  set  equal  to  zero.  Likewise,  the  cost  accumulation  sub- 
function of  the  schedule  function  is  not  considered  for  this 


24 


25 


I 

{ 

\ 


% I 


simulation  and  all  cost  data  was  set  equal  to  zero,  The 
survivability  function  is  not  turned  on  during  the  simu- 
lation since  survivability  of  the  aircraft  due  to  enemy 
ground  fire  is  not  a normal  consideration  for  a tanker 
mission,  The  navigation  update  function  is  not  used  since 
the  mode  data  used  in  the  navigation  function  account  for 
update  capability.  All  remaining  functions  are  used  in 
the  simulation  and  a brief  description  of  each  will  be 
given. 

Fuel.  This  function  provides  a means  of  managing  the 
aircraft  fuel  requirements,  Three  subfunctions  are  available 
for  fuel  losiding,  fuel  usage,  and  air-refueling,  There  are 
no  direct  nominal  calculations  for  this  function,  however, 
the  fuel  flow  rate  during  flight  is  one  of  the  aircraft 
states  that  is  provided  by  the  aircraft  flight  simulation, 

An  aircraft  abort  occurs  if  fuel  monitoring  or  refueling 
states  are  not  available.  A mission  abort  occurs  if  no 
modes  are  available  for  air-refueling.  The  fuel  loading 
subfunction  is  used  to  ensure  that  the  aircraft  fuel  tanks 
are  properly  filled  before  each  sortie.  The  fuel  usage 
subfunction  is  called  periodically  during  the  simulation 
to  monitor  the  fuel  status  and  fuel  flow.  This  subfunction 
aborts  an  aircraft  if  the  remaining  fuel  is  less  than  that 
required  to  complete  the  flight  plus  the  required  reserve. 
Figure  4 shows  the  control  logic  for  fuel  loading  and  usage. 
The  air  refueling  subfunction  allows  the  program  to  simulate 
onloading  of  fuel  (if  modeling  a receiver  aircraft)  or  off- 
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Figure  4.  Fuel  Loading  and  Usage  Subfunctions 
(Ref  2:38) 

loading  of  fuel  (for  this  tanker  simulation).  Refueling' 
occurs  when  the  subfunction  is  turned  on.  The  hookup  time 
is  determined  from  a uniform  probability  distribution  spe- 
cified by  the  input  of  a minimum  and  maximum  hookup  time. 

For  this  simulation,  the  minimum  and  maximum  times  were  made 
equal  in  order  to  force  a specified  offload  per  refueling. 
Figure  5 shows  the  control  logic  used  in  the  air  refueling 
sub function. 
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Flight.  The  flight  function  provides  a means  of 
specifying  the  equipment  requirements  for  the  various  por- 
tions of  the  mission.  Five  subfunctions  - launch,  aircraft 
abort,  mission  abort,  aircraft  loss,  and  landing  are 
available.  Nominal  calculations  required  by  the  flight 
function  are  performed  during  the  aircraft  flight  simulation. 
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Figure  5.  Refueling  Subfunction 
(Ref  2:39) 


Figure  6 shows  the  control  logic  for  the  launch  subfunction. 
A random  sortie  launch  time  is  drawn  from  a log-normal  dis- 
tribution defined  by  the  input  data.  This  time  represents 
the  interval  between  engine  start  and  takeoff.  At  takeoff, 
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Figure  6.  Launch  and  Landing  Subfunctions 
(Ref  2:41) 


The  aircraft  equipment  states  that  are  associated  with 
the  aircraft  abort  subfunction  allow  the  determination  of 
an  aircraft  abort  during  the  simulation.  For  the  aircraft 
abort  subfunction,  each  aircraft  must  satisfy  one  of  the  OR 
conditions  within  the  mode  structure.  This  provides  the 
capability  to  define  the  conditions  for  which  the  abort  of 
one  aircraft  will  cause  the  abort  of  another  aircraft. 

The  mode/state  requirements  of  the  mission  abort  sub- 
function are  used  to  define  when  the  entire  sortie  must  be 
aborted.  If  no  modes  are  available  for  this  subfunction, 
the  entire  flight  of  aircraft  will  abort  the  sortie, 

The  aircraft  loss  subfunction  is  used  to  define  the 
minimum  set  of  equipment  necessary  to  keep  the  aircraft 
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airborne.  If  no  equipment  state  is  available,  the  aircraft 
is  lost  or  destroyed.  Figure  6 shows  the  control  logic  for 
the  landing  subfunction.  Control  is  transferred  to  the 
schedule  routine  upon  landing.  If  no  landing  equipment 
state  is  available,  the  aircraft  is  considered  lost. 

Mission.  This  function  provides  a means  of  specifying 
the  operations  schedule  and  the  cost  of  various  portions  of 
the  simulated  mission.  The  cost  subfunction  was  not  used 
since  cost  was  not  part  of  the  problem.  The  schedule  sub- 
function, using  the  input  data,  manages  the  engine  start 
times  for  the  individual  sorties  and  is  the  overall  mission 
scheduler  for  the  nominal  portion  of  the  simulation. 

Formation.  This  function  is  used  to  specify  the 
position  of  the  aircraft  within  the  flight  relative  to  the 
lead  aircraft.  The  user  specifies  the  distance  right  or 
left,  behind,  and  above  the  leader  for  up  to  three  additional 
aircraft, 

Navigation.  This  function  includes  two  subfunctions: 
radio  aided  navigation  and  self  contained  navigation.  These 
subfunctions  provide  the  capability  of  computing  and  consid- 
ering navigation  errors.  Radio  aided  navigation  considers 
fixed  position  error  which  is  dependent  upon  aircraft 
equipment  and  ground  station  accuracies.  Self  contained 
navigation  considers  a per-unit -time  navigation  error  rate 
where  the  total  navigation  error  increases  as  the  time  from 
the  last  reliable  navigation  update  fix  increases.  A mission 
abort  occurs  if  the  self  contained  navigation  equipment  for 
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that  subfunction  fails.  If  the  radio  aided  navigation 
fails,  a switch  to  self  contained  navigation  is  attempted. 
If  the  switch  is  successful,  the  mission  is  continued; 
otherwise,  a mission  abort  occurs.  Figure  7 shows  the 
control  logic  for  these  navigation  subfunctions. 

Communications.  The  communications  function  is  used 
to  assess  the  reliability  of  the  communications  equipment. 
The  interflight  subfunction  considers  communications  be- 
tween aircraft  within  the  flight  while  the  external  commu- 
nications subfunction  considers  communications  from  the 
flight  to  the  ground.  Since  this  simulation  is  mostly  an 
overwater  tanker  mission,  interflight  communications  is 
considered  to  be  UHF  communications  while  external 
communications  is  considered  to  be  HF  communications. 

Loss  of  all  aircraft  equipment  states  for  interflight 
communications  causes  an  aircraft  abort.  Loss  of  all  modes 
for  either  subfunction  causes  a mission  abort. 

Target  Acquisition.  This  function  was  used  in  this 
study  to  simulate  the  radar  and/or  visual  identification 
of  receiver  aircraft  during  the  air  refueling  rendezvous 
and  severe  weather  encountered  along  the  flight  path.  The 
display  target  acquisition  subfunction  is  used  to  simulate 
radar  identification  while  the  visual  target  acquisition 
subfunction  , as  its  name  implies,  is  used  to  simulate 
visual  detection,  If  no  display  acquisition  modes  are 
available,  a switch  to  visual  acquisition  is  made.  Since 
the  model  can  only  search  for  targets  that  are  located  on 
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the  ground  surface,  the  targets  projected  ground  position 
was  used  to  determine  if  target  acquisition  occurred.  The 
user  supplies  the  parameters  which  determine  the  field  of 
view  (FOV) , Figure  8 shows  the  geometry  of  the  angles 
defining  the  FOV.  Each  mode  of  the  acquisition  subfunction  \ 
provides  data  for  those  angles: 

' i 

4>  ■ depression  to  center  of  FOV  1 , ! 

tp  - side  angle  to  center  of  FOV 

ev  ■ vertical  height  of  FOV 

0h  ■ horizontal  wi4th  of  FOV  . s 

i » • i ' 

When  a target  falls  within  the  FOV,  the  depression 
apgle  is  calculated  and  the  probability  of  target  detec- 
tion, taken  from  the  input  table  of  detection  probability 

\ " i‘  .i 

versus  depression  angles,  is  used  to  determine  if  the 
target  is  acquired.  There  are  no  aircraft  aborts  due  to 
lbss  of  target  acquisition  equipment.  A mission  abort 
occurs  only  if  all  possible  modes  for  both  subfunction  have 
failed.  Since  the  visual  target  acquisition  subfunction  has 
no  required  equipment,  a mission  abort  cannot  be  caused  by 
loss  of  target  acquisition  equipment.  Figure  9 shows  the 
control  logic  used  for  the  target  acquisition  subfunctions. 

Navigation  Error.  Since  a prime  concern  of  this  study 
is  to  determine  the  impact  of  navigational  accuracy  on  mission 
success,  a method  to  measure  navigational  accuracy  was  needed. 
The  AEP,  while  internally  calculating  navigation  error,  had  no 
method  of  outputting  this  data.  To  solve  this  problem, 
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Figure  9.  Target  Acquisition  Subfunction 
(Ref  2 : 56) 


Battelle  Columbus  Laboratories  was  contacted,  They  were 
able  to  add  a routine  to  the  AEP  which  allows  the  user  to 
sample  the  navigation  error  for  up  to  five  waypoints  on  the 
flight  profile.  This  is  accomplished  by  turning  on  naviga- 
tion error  subfunctions  30.1  through  30.5.  The  output  of 


this  subfunction  represents  the  circular  error  from  the 
planned  waypoint  coordinates  to  the  simulated  aircraft 
position.  This  output  allows  the  user  to  evaluate  the 
accuracy  and  reliability  of  various  navigation  hardware 
configurations. 

Monte  Carlo  Evaluation 

A Monte  Carlo  evaluation  is  performed  after  the  mission 
flight  path  has  been  defined  and  all  of  the  hardware,  func- 
tion, subfunction,  state,  and  mode  performance  parameters 
have  been  defined.  These  parameters  all  define  probability 
density  functions  which  characterize  performance.  During 
each  Monte  Carlo  run,  random  numbers  are  drawn  from  the 
appropriate  density  function  to  simulate  actual  performance. 
System  failures  are  checked  at  short  intervals  on  each  run. 

A single  density  function  reflecting  the  Ml'BF  of  all  of  the 
hardware  elements  is  generated,  An  exponential  failure 
rate  is  assumed  for  each  of  the  subsystems,  thus  the  fail- 
ure rate  for  the  total  system  is  the  sum  of  all  the  individual 
failure  rates.  A single  random  number  is  drawn  at  each 
interval  to  determine  whether  a failure  occurred.  If  a 
failure  did  occur,  another  random  number'  is  drawn  to  deter- 
mine whieh  item  failed.  The  distribution  for  this  draw 
reflects  the  relative  MTBF’s  of  the  equipment  involved. 

Once  a failure  has  occurred,  each  operating  state/mode  is 
checked  to  determine  if  the  failed  equipment  is  required, 

If  a mode  does  require  that  equipment,  regression  occurs 
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until  a mode  is  found  which  has  all  operable  equipmei.t.  If 
no  mode  can  be  found,  the  subfunction  is  inoperable  and  thi 
program  checks  the  appropriate  function/ sub function  subrou- 
tines to  determine  the  impact  of  the  loss  of  the  subfunction. 
It  may  be  that  another  subfunction  can  provide  the  necessary 
function  or  that  the  mission  can  be  continued  without  the 
function.  On  the  other  hand,  loss  of  the  sub function  may 
dictate  an  aircraft  or  mission  abort.  Performance  and  fail- 
ure events  are  accumulated  for  the  numerous  Monte  Carlo  runs 
and  the  results  are  listed  in  the  programs  output  (Ref  5:21- 
22). 


Interactive  Graphics  Processor 

The  ABP  program  is  incorporated  in  an  interactive  graphics 
processor.  The  main  objectives  in  providing  an  Interactive 
capability  are  to: 


1.. 


Provide  the  user  with  an  easier  means  of 
communicating  with  the  computer. 


2. 


Help  verify  that  inputs  are  free  from  the 
common  keypunch  or  typing  mistakes. 


3. 


Provide  a data  bank  for  storing  and 
retrieving  input  data. 


4, 


Provide  sufficient  instructions  within  the 
interactive  software  to  avoid  the  need  for 
consulting  computer  program  manuals. 


5, 


Provide  graphical  representation  of  input 
data  and  program  results, 


The  AEP  is  a batch  program,  even  though  it  is  automat- 
ically executed  from  a remote  interactive  terminal.  The 
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input  and  output  processors  art  used  to  communicate  with 
tht  uatr  for  problem  set -up  and  rtvltw  of  the  output 4 < A 
very  important  "Help"  file  and  on-line  user's  oanual  art 


available  to  aid  the  user  in  communicating  with  the' pro- 
cessori  and  associated  programs  CRef  2:65-66) > - 
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III.  Model  Evaluation 

A model  should  be  created  for  a specific  purpose,  and 
its  adequacy  or  validity  evaluated  only  in  terms  of  that 
purpose.  To  evaluate  a model  means  to  develop  an  acceptable 
level  of  confidence  that  inferences  drawn  from  the  perform- 
ance of  the  model  are  correct  and  applicable  to  the  real 
world  system.  The  proctss  of  evaluating  the  AEP  will  be 
divided  into  three  categories:  (1)  verification,  to  insure 
that  the  model  behaves  as  it  is  supposed  to;  (2)  validation, 
to  test  the  agreement  between  the  behavior  of  the  model  and 
that  of  the  real  world;  and  (3)  analysis,  which  deals  with 
the  interpretation  of  the  data  generated  by  the  model 
(Ref  4 : 208-210] . 

Verification 

The  first  step  in  evaluating  the  AEP  was  to  verify  that 
the  model  has  internal  consistency.  To  accomplish  this,  the 
AEP  was  run  with  3000  Monte  Carlo  trials  of  the  Loring 
Tanker  Task  Force  mission  profile,  using  the  KC-135  Baseline 
configuration.  The  simulated  equipment  failures  generated 
by  the  model  were  compared  to  the  expected  equipment  fail- 
ures. To  determine  the  expected  equipment  failures,  the 
total  simulated  flight  time  was  divided  by  the  MTBF  for  each 
candidate  considered  in  the  baseline  configuration.  The 
baseline  equipment  candidates  were  then  ranked  from  highest 
to  lowest  simulated  failures.  Table  VIII  lists  the  simulated 
and  expected  failures  for  all  baseline  candidates.  To 
determine  whether  the  simulated  data  could  be  considered 
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TABLE  VIII 

OBSERVED  VERSUS  EXPECTED  EQUIPMENT  FAILURES 


Nun* 


Observed 

Failures 


Expected 

Failures 


1 

Sextant : ' 

889 

898.02 

0.091 

2 

HP  Radio  C ARC-58) 

256 

278,22 

1.775 

3 

VOR/LOC  Receiver 

127 

111.84 

2.055 

4 

UHF  Radio  #1  (ARC -3 4) 

124 

122.56 

0.017 

5 

UHF  Radio  #2  (ARC-34) 

119 

122.56 

0.103 

6 

Water  Injection  System 

59 

78.60 

4.888 

7 

Pilots  Altimeter 

46 

38.86 

1.312 

8 

C/P  Instrument  Power 

44 

38,86 

0.680 

9 

Search  Radar  (APN-59) 

41 

37.70 

0,289 

10 

Landing  Gear 

35 

33.32 

0.085 

11 

C/P  Altimeter 

32 

38.86 

1,211 

12 

ii>acon  Radar  (APN-69) 

* 

32 

36.87 

0.643 

13 

Nav,  Computer  (ASN-7) 

30 

34,10 

0.493 

14 

Engine  No.  2 

29 

23.62 

1.225 

15 

Pilots  Flight  Director 

29 

19.43 

4.714 

16 

C/P  Flight  Director 

27 

19.43 

2.949 

17 

Compass  System  (J-4) 

24 

27.77 

0.512 

18 

Electrical  System 

23 

29,35 

1,374 

19 

Doppler  Radar 

23 

24.59 

0.103 

20 

Engine  Instruments 

22 

26.62 

0.802 

21 

Fuel  Quantity  Gages 

22 

21,41 

0,016 

40 
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TABLE  VIII  (Continued) 


Nani* 

Observed 

Failures 

(F0) 

Expected 

Failures 

•>  cv. 

FiL" 

22 

Eng in*  No,  1 

22 

23.62 

0.111 

23 

Engina  No,  4 

22 

23.62 

0.111 

24 

Engine  No.  3 

18 

23.62 

, ■ 

1.337 

25 

Pilots  Instruments 

18 

16.40 

0.156 

26 

Compass  System  (N-l) 

16 

18,65 

0.377 

27 

C/P  Instruments 

13 

15.87 

0.519 

28 

Tacan  Set  (ARC- 72) 

12 

11.90 

0.001 

29 

Flight  Controls 

12 

10.71 

0.155 

30 

Engine  Controls 

10 

12.69 

0,571 

31 

Hydraulic  System 

8 

7.93 

0.001 

32 

Fuel  System 

S 

5.55 

0.055 

33 

Environmental  Controls 

4 

5.16 

0.261 

34 

XFF/SIF  System 

3 

5.55 

1.172 

35 

Air  Refueling  System 

n 

3.67" 

Refueling  Instruments 

1 

1.98 

OB 

Aircraft  Lighting 

i 

* 1.98 

Vi  0.026 

Airframe 

i 

0.45 

w 

Emergency  Landing  Gear 

i 

0.45 

statistically  aqual  to  the  expected  data,  a chi-square 
goodness  of  fit  test  on  the  data  was  conducted.  The  data 
for  the  last  five  candidates  on  table  VIITwere  grouped 
together  to  ensurq  that  all  data  groups  have  an  expected 
value  of  at  least  5,  a prerequisite  of  the  chi-square 
goodness  of  fit  test.  The  hypothesis  to  be  tested  is  that 
there  is  no  significant  difference  between  the  simulated 
failure  distribution  and  the  expected  failure  distribution, 
at  the  0.05  level  of  significance.  The  chi-square  statistic 
for  these  two  distributions  is  calculated  as  follows: 


X2 


. } (F°  • v2 

i-1  . Ft 


where  F<>  is  the  observed  frequency 
and  F0  is  the  expected  frequency 

Using  this  formula,  x2  was  found  to  be  equal  to 
30.186,  Since  this  is  less  than  48.6,  the  table  value  of 
X^.OS  for  34  degrees  of  freedom  (the  number  of  groups  minus 
one),  the  hypothesis  that  there  is  no  significant  difference 
between  the  distributions  cannot  be  rejected  at  the  0.05 
level  of  significance.  It  can  be  concluded  that  the  simu- 
lated failures  do  provide  a "good  fit"  to  the  expected 
failures. 


Validation 

In  order  to  validate  the  model,  the  mission  success 
rate  generated  by  the  simulation  was  compared  to  the  mission 
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success  rate  experienced  by  the  KC-135  aircraft  fleet  for 
the  six  month  period  that  was  used  to  determine  the  input 
MTBF's . Since  the  real  world  data  is  accumulated  from  many 
different  types  of  missions,  there  is  the  possibility  that 
the  failure  of  a "critical"  piece  of  equipment  may  not  con- 
tribute to  an  actual  abort.  An  example  of  this  situation 
is  reflected  by  the  fact  that  during  114,350  hours  of 
actual  flying,  there  were  235  reported  engine  failures  but 
only  132  aircraft  aborts  attributed  to  engine  failures. 

This  can  probably  be  explained  by  the  fact  that  if  the 
engine  failure  occurred  during  the  portion  of  the  mission, 
when  the  aircraft  was  returning  to  base,  the  mission  would 
be  considered  complete  and  an  abort  would  not  be  logged. 

To  compensate  for  this  situation,  the  number  of  failures, 
rather  than  the  number  of  aborts,  for  the  following  "criti- 
cal" aircraft  equipment  candidates  was  used: 


Critical  System 


Aborts/Failures 


1. 

Engines 

...  132/238 

2. 

Water  Injection 

...  57/198 

3. 

Engine  Controls 

4/32 

4. 

Flight  Controls 

17/  27 

5. 

Hydraulic  System...,. . 

...  14/  20 

The  sum  of  the  above  failures  plus  all  other  aborts 
attributed  to  the  candidates  considered  in  the  baseline 
configuration  is  736,  Thus,  the  average  for  the  entire 
KC-135  fleet, with  a six  month  total  of  114,350  flying  hours 
is  155.37  hours  per  abort  or  critical  failure. 

During  the  45,350  simulated  flying  hours  accumulated 
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during  th«  3000  Mont#  Carlo  trial  run,  there  were  143 
aircraft  aborts  and  184  mission  aborts  for  a total  of  337 
aborts,  This  equates  to  139,54  hours  per  abort. 

Of  the  6000  aircraft  launched  during  the  simulation, 
5663  completed  the  mission,  yielding  a mission  success  rate 
of  94.4  percent.  Since  the  six  month  fleet  data  was  com- 
piled from  sorties  of  varying  duration, i it  is  difficult  to 
determine  the  actual  mission  success  rate  for  the  KC-135 
fleet  for  that  period.  If  one  assumes  that  the  average 
flight  time  for  the  fleet  is  equal  to  that  in  the  simula- 
tion, 7,63  hours,  then  the  approximate  number  of  aircraft 
launched  would  be  14,987.  Of  these,  14,251  did  not  abort 
or  experience  a critical  failure,  yielding  a mission  success 
rate  of  95,1  percent,  If  this  assumption  of  average  flight 
time  is  valid,  then  the  simulated  success  rate  of  94.4 
percent  is  very  close  to  actual  success  rate,  The  average 
time  between  aborts  of  139.5  and  155.4  for  the  simulation 
and  real  world,  respectively,  also  suggest  that  the  AEP  does 
reasonably  model  the  real  world  and  can  be  considered  a 
valid  model. 

Analysis 

Now  that  the  AEP  has  been  shown  to  simulate  real  world 
data,  it  must  be  determined  if  it  can  be  used  to  assoss  al- 
ternate avionic  systems  that  are  being  considered  in  the 
KC-135  Avionics  Modernization  Program.  To  accomplish  this, 
the  mission  success  rates  and  navigation  error  for  the 


baseline,  single  INS,  and  dual  INS  configurations  were  com- 
pared. These  three  configurations  were  first  used  in  the 
Loring  Tanker  Task  Force  mission  profile.  Next,  these  same 
configurations  were  used  in  the  Mildenhall  EWO  mission 
profile  to  determine  the  impact  of  a different  mission  on 
the  results  of  the  simulation.  Table  IX  shows  the  data 
that,  was  collected  from  these  six  runs. 

This  data  shows  a marked  decrease  in  navigation  error 
is  obtained  when  a single  INS  is  added  to  the  baseline 
configuration,  while  the  addition  of  a second  INS  and  the 
removal  of  the  navigator  causes  virtually  no  change  in  the 
navigation  error  or  mission  success  rate.  This  can  be  seen 
in  both  mission  profiles.  The  EWO  mission  success  rate  was 
higher  than  the  peacetime  rate  because  of  the  lower  abort 
criteria  that  was  used  for  the  BWO  profile. 

One  of  the  real  advantages  of  simulation  is  the  ability 
to  readily  perform  a sensitivity  analysis.  Sensitivity 
analysis  consists  of  systematically  varying  of  the  input 
parameters  and/or  input  variables  over  somo  range  of  inter- 
est and  observing  the  effect  upon  the  models  response.  Such 
experimentation  can  help  tremendously  in  building  confidence 
in  the  results  of  the  model  (Ref  4:235). 

The  correlation  time  constant  input  parameter,  used  in 
the  model  to  compute  navigation  error,  was  not  well  under- 
stood at  the  onset  of  this  study.  All  data  sources 
contacted  were  unable  to  define  this  parameter  or  provide 
this  data  for  the  KC-135  aircraft.  Since  this  parameter 
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TABLE  IX 

NAVIGATION  ERRORS  AND  MISSION  SUCCESS  PATES 


DATA 

Lorlng  TTP  Mission 

Mean  Navigation  Error 
at  Rendezvous  Point 
(NM) 

mmmmm  Fi'ln  >•  » 

Mean  Navigation  Error 
After  Last  Refueling 
(NM) 


NAVIGATION  EQUIPMENT 


BASELINE  I SINGLE  INS  DUAL  INS 


1,86 


Mission  Success  Rate 

CD, 


Mildenhal]  EWO  Mission 

Mean  Navigation  Error 
at  Rendezvous  Point 
(WO ■ 

Mean  Navigation  Error 
After  Refueling  (NM) 

Mission  Success  Rate 

CD 


14.33 


93.7 


93.8 


1,82 


2.71 


93.9 


17  o 31 


19.58 


98.95 


3.47 


98.95 


3.36 


4.02 


98.85 


had  to  be  estimated,  sensitivity  analysis  was  performed  to 
detbrmine  the  impact  of  a possible  inaccurate  estimate,  The 
default  value  for  this  parameter  in  the  AEP  model  is  infinity. 
Initial  trial  runs  of  the  model  using  this  value  were  made 
while  debugging  the  program  in, vc  data.  After  the  debugging 
process  was  completed,  the  values  for  the  correlation  time 
constants  were  set  to  equal  to  zero  (minutes) . Several  runs 
were  mado  using  this  value  before  the  values  were  changed  to 





one  minute  for  the  INS  navigation  (mode  1)  and  ten  minutes 
for  all  other  navigation  modes.  Table  X shows  the  results 
of  these  runs.  The  data  shows  that  there  is  little  change 
in  the  navigation  error  when  the  correlation  time  constant 
is  changed  from  0 to  1-10  minutes.  There  is  a more  signi- 
ficant change  in  the  navigation  error  when  the  default  value 
of  infinity  is  used.  The  values  of  1 and  10  minutes  will  ,, 
be  left  id  the  model  unless  a reason  for  change  can  be  seen. 


TABLE  X 

NAVIGATION  ERROR  VBRSUS  CORRELATION  TIME  CONSTANT 


DATA  Correlation  Time  Constant  (min) 

Baseline 

o 

1-10 

Mean  Navigation  Error 
at  Rendezvous  Point  (NM) 

9.86 

(5.52) 

9.35 

(5.65) 

(4.65) 

Mean  Navigation  Error 
After  Refueling  (NM) 

14.33 

(10.09) 

14.25 

(10.22) 

(9.09) 

Sinyle  INS 

Mean  Navigation  Error 
at  Rendezvous  Point  (NM) 

1.86 

1.84 

3.22 

Mean  Navigation  Error 
After  Refueling  (NM) 

2.76 

2.76 

3.66 

(Note:  Data  in  parenthesis  are  from  flight  profile  2) 
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IV. 


Summary . Conclusion*  .,  and  Peconroendatlons , 


Summary 

The  Air  Force  Av^ohics  Laboratory  ttis  a computer,  model 
.railed  the  Avionics  Evaluation  Program  that  computes  equip* 
went  ifaJIurOe,  navigation  error,  and  mission ■ slices  spates  ,A 
for  a specified  type  of  aircraft  flying  .a  specified  mission . 
The  equipment  failures  are  computed  by  making  many  Monte 

• \ , 1 ( . . . V ' > * ’ - 

Carlo  trials  of  a single  mission  using  the  mean  time  between 

failures  for  the  aircraft  equipment  that  are  specified  as 

• ; : ( " , \ 

input  parameters.  3ased  on  the  aircraft  abort  and  loss 


criteria  specified  by  the  user,  the  model  determines  the 

• i 

number  of  aircraft  and  missiop  aborts  that  ocdur  during  the 
simulation.  The  ability  to  sample  navigation  error  at 
various  points  in  the  mission,  which  Was  added  during  this 
study,  allows  the  user  to  determine  the  navigational  accur- 
acy of  various  navigation  systems.  This  study  assumed  that 
navigation  and  mission  success  were  solely  dependent  on  the 
KC-135  and  tho  navigation  capability  and  reliability  of 
various  receiver  aircraft  was  not  considered, 

This  research  was  done  to  determine  whether  the  AEP 
could  be  used  to  mcdel  the  KC-135  aircraft  mission  accurately. 
A comparison  of  the  results  of  the  model  was  made  with  actual 
field  data  to  validate  the  output  of  ths  AEP.  Analysis  of 
tne  results  showed  that  there  is  no  significant  difference 
between  the  model  output  and  the  field  data. 

The  most  significant  result  of  this  research  was 
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establishing  a JCC-135  baseline  for  the  AEP,  This  study 
has  done  all  of  the  necessary  research  and  data  collection 
for  the  KC-135  aircraft  and  all  of  this  data  is  stored  as 
a permanent  file  within , the  AEP,  Any  future  KC-135  equip*! 
went  tradeoff  study  may  be  accomplished  with  minimum  time 
and  effort.  This  capability , should  be  invaluable  for  ; j 
assessing  alternate  aVionico  equipment  during  the  KC/C-135 
Avionics  Modernization  Program. 

Conclusions 

It  appeals  that  the  Avionics  Evaluation  Program  can 
be  used  to  accurately  model  the  mission  of  the  KC-135,  a 
strategic  aircraft,  even  though  it  was  originally  designed 
to  model  tactical  fighter  aircraft.  There  is  also  good 
reason  to  believe  that  the  AEP  can  Objectively  assess 
alternate  avionic  system  design/ concepts  for  the  KC-135 
aircraft,  in  terms  of  mission  success,  in  a realistic 
mission  environment.  This  entire  study  was  done  under  the 
assumption  that  the  KC-135  can  safely  complete  its  tanker 
mission  by  replacing  the  navigator  with  cost  effective 
avionics  systems.  While  this  study  considered  only  the 
Delco  Carousel  IV  INS  as  a replacement  for  the  navigator, 
the  model  is  capable  of  assessing  the  impact  of  any  new 
avionics  suits  that  might  be  considered  during  the  KC-135 
avionics  modernization  program.  The  results  of  thl*  study 
show  that  the  addition  of  a single  INS  to  tho  current 
aircraft  configuration  would  allow  the  KC-135  to  operate 
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in  the  North  Atlantic  track  system  within  the  10  nautical 
mile  tolerance  established  by  the  International  Civil 
Aeronautical  Organization.  It  was  also  shown  that  by 
deleting  the  navigator  and  replacing  him  with  a second 
INS,  that  navigational  accuracies  could  be  maintained 
with  no  significant  change  in ■> the  mission  success  rate . 

The  Impact  of  the  new  strategic  doppler  on  the  KC-135 
mission  was  not  addressed  because  of  the  lack  of  informa- 
tion available  on  that  system.  Additional  equipment, 
deemed  necessary  to  allow  the  ICC- 135  navigator  to  be  re- 
placed, will  subsequently  have  to  be  put  into  the  ABP  to 
determine  their  impact  on  the  overall  mission  success  rate* 
Once  all  equipment  changes  have  been  specified,  a decision 
on  whether  or  not  those  systems  are  "cost  effective"  will 
have  to  bo  made.  Although  cost  was  intentionally  deleted 
from  this  study,  the  ABP  does  have  a cost  accumulation 
subfunction  that  could  be  used  at  a later  date  to  determine 
if  the  suggested  changes  would  be  cost  effective. 

Recommendations 

This  study  only  considered  two-ship  tanker  cells  for 
the  simulation.  The  analysis  might  also  be  done  using  a 
single  aircraft  as  well  as  three  and  four-ship  cells  to 
determine  the  impact  of  the  number  of  aircraft  per  cell  has 
on  the  output  of  the  model. 

As  with  the  KC -135,  there  is  a large  scale  B - 52  avionics 
modernization  program  currently  in  progress.  Since  the  ABP 
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was  shown  to  adequately  modal  tha  KC-13S  mission,  It  is 
suggastad  that  tha  AEP  ba  used  to  modal  tha  B-S2  mission. 

Tha  B- 52  mission  could  ba  used  to  evaluate  the  surviv- 
ability, target  acquisition,  and  weapon  delivery  functions  ' 
used  in  the  AEP  modal.  In  many  senses,  the  B-52  mission 
is  vary  similar  to  the  tactical  fighter  mission  for  which 
the  AEP  was  designed.  Since' the  AEP  is  available  on  the 
ASD  computer,  the  Strategic  Systems  SPO  would  have  easy 
access  to  the  model. 

There  are  three  changes  to  the  AEP  that  are  recommended. 
First,  that  the  random  number  seed  used  in  the  model  be 
changeable  to  assist  in  the  process  of  validating  the 
models  output.  It  is  nice,  however,  to  have  a constant 
random  number  seed  when  performing  sensitivity  analysis 
with  the  model.  Second,  that  the  last  set  of  output  data 
labeled  "A/C  Abort  Equipment  Status  Summary",  be  reformat- 
ted to  provide  the  user  with  a clearer  picture  of  the 
simulation.  This  would  be  especially  helpful  while 
debugging  the  input  data  and  parameters.  Instead  of  the 
current  format,  the  following  format  is  suggested.  For 
each  abort  that  occurs  during  the  simulation,  print  a line 
showing  the  failed  equipment,  the  time  that  the  failure 
occurred,  and  the  time  of  the  abort  as  follows: 

A/C  Abort -£  Equipment;  Failure  Summary 

1.  51-7  9 03+15 , 62-1  fl  04+30.,  23-2:  Abort  806t05 

2.  23-1:  Abort  9 05+50,  51-7  8 06+05,  23-4:  A/C 
Loss  8 06+45 


■a 

This  type  of  output  data  would  be  of  greater  value  to 
the  user  than  the  present  format.  This  format  would  also 
allow  the  user  to  check  at  a glance  that  the  desired  abort 
logic  was  being  used  in  the  model. 

Third,  the  current  model  only  collects  data  on  equipment 
failures  for  thirty  minutes  after  an  abort.  For  long  mis- 
sion profiles,  this  may  not  be  sufficient  since  subsequent 
failures  may  occur  and  cause  the  loss  of  that  aircraft. 

The  model  should  be  changed  so  that  when  an  aircraft  aborts, 
the  aircraft  would  proceed  to  the  takeoff  base  or  landing 
base  (whichever  is  closer)  and  collect  equipment  failure 
data  until  the  aircraft  is  back  on  the  ground. 
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APPENDIX  A 
Glossary  of  Acronyms 


GLOSSARY  OF  ACRONYMS 

AEP  Avionics  Evaluation  Program 

ARAL  Air  Force  Avionics  Laboratory 

AFFDL  Air  Force  Flight  Dynamics  Laboratory 

AMP  Avionics  Modernization  Program 

EWO  Emergency  War  Orders 

FOV  Field  of  View 

HP  High  Frequency 

IFF  Identify  Friend  or  Foe 

INS  Inertial  Navigation  System 

MTfiF  Mean  Time  Between  Failure 

QPA  Quantity  Per  Aircraft 

RAF  Royal  Air  Force 

ROC  Required  Operational  Capability 

SAC  Strategic  Air  Command 

TAACB  Tanker  Avionics/Aircrew  Complement  Evaluation 

TTF  Tanker  Task  Force 

UHF  Ultra  High  Frequency 

WUC  Work  Unit  Code 
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APPENDIX  B 
Aircraft  Equipment  Reliability  P#ta- 
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Aircraft  Equipment  Reliability  Data 


EfluipfisMi . msmiiMmjm, 


J3XSS£(HRS  > 


u airframe 

1 KC-135/A  ACFT 

13  LANDING  GEAR 

1 LAMPING  GEAR 
8 EMERGENCY  LANDING  GEAR 

14  FLIGHT  CONTROLS 

1 FLIGHT  CONTROLS 
83  PROPULSION  SYSTEM 

1 J-57  ENGINE  N0.1 

8 J-57  ENGINE  NO. 3 

3 J-57  ENGINE  NO. 3 

4 J-57  ENGINE  NO. 4 

5 ENGINE  CONTROLS 

6 WATER  INJECTION  SYSTEM 

41  AIR-CONDITIONING,  PRESSURIZATION 
1 ENVIRONMENTAL  CONTROL 
48  ELECTRICAL  POWER  SUPPLY 
1 ELECTRICAL  SYSTEM 
8 COPILOTS  INSTRUMENT  POUER 

44  LIGHTING  SYSTEMS 

1 ACFT  LIGHTING 

45  HYDRAULIC  AND  PNEUMATIC  POWER  SUPPLY 

1 HYDRAULIC  SYSTEM 

46  FUEL  SYSTEM 

1 FUEL  SYSTEM 
8 AIR  REFUELING  SYSTEM 
SI  INSTRUMENTS 

1 PILOTS  FLIGHT  DIRECTOR 
a COPILOTS  FLIGHT  DIRECTOR 

3 PILOTS  INSTRUMENTS 

4 COPILOTS  INSTRUMENTS 

5 PILOTS  ALTIMETER 

6 COPILOTS  ALTIMETER 

7 PERISCOPIC  SEXTANT  (8) 

8 ENGINE  INSTRUMENTS 

9 FUEL  QUANTITY  SYSTEM 
10  REFUELING  INSTRUMENTS 


100000 

1361 

100000 

4836 

I960 

I960 

1980 

1980 

3573 

577 

8796 

1545 

1167 

28876 

5717 

8167 

11435 

8334 

8334 

8766 

8858 

1167 

1167 

101 

1700 

8118 

88870 
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Aircraft  Equipment  Reliability  Data 
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1 !ii 
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1 N-l  COMPASS  SYSTEM 

2 J-4  COMPASS  SYSTEM 
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[•\ 

1 HP  RADIO  ARC-58 

163 
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1 
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!J  1 

8 UHP  RADIO  NO, 8 ARC-34 
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65 
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i1 
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8168 

71 
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■„ 

1 UOR/tOC  RECEIVER 

811 

8 TACAN  RECEIVER 

3811  S 

72 

RADAR  NAVIGATION 

J,  SEARCH  RADAR  APN-S9 

1863  I 

< 

8 BEACON  RADAR  APN-69 

1838 

, 1 

1 

3 DOPPLER  RADAR  SYSTEM 

1844 
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4 NAV. COMPUTER  ASN-7 

1336 

t"  i 

!;•  £ 

5 CAROUSEL  IV  INS  (NO.  1) 
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Aircraft  Performance 
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APPENDIX  D 

Subfunction  Mode/Stete  Relationships 


Reference  List  of  Equipment  Designation  Numbers 
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Subfunction  Mode/State  Relationships 
Used  for  Baseline  Configuration 
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Subfunction  Mode/State  Relationships 
(That  Were  Changed  for  EWO  Profiles) 
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